| 标题 | myWebland myBloggie 2.1.6, 2.1.4 Authorization Bypass |
|---|
| 描述 | A SQL injection flaw in the myBloggie login module allows crafted input to bypass the authentication query. Due to improper escaping and handling of backslashes and null bytes, an attacker may manipulate the SQL statement used for verifying user credentials, potentially gaining unauthorized access. |
|---|
| 来源 | ⚠️ https://github.com/ixpqxi/CVE_LIST/blob/master/myBloggie/authorization_bypass.md |
|---|
| 用户 | ixpqxi (UID 83247) |
|---|
| 提交 | 2025-12-01 03時46分 (10 月前) |
|---|
| 管理 | 2025-12-12 12時10分 (11 days later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 26245 [Mywebland myBloggie 2.1.1/2.1.2/2.1.3 Beta Login login.php username SQL注入] |
|---|
| 积分 | 0 |
|---|